apify / fingerprint-suite

Browser fingerprinting tools for anonymizing your scrapers. Developed by Apify.
Apache License 2.0
809 stars 87 forks source link

Spoof detection #33

Open petuxodev opened 1 year ago

petuxodev commented 1 year ago

Describe the bug

  1. Looks like botd detects OS spoof, when i set operatingSystems: ['windows'] it detects spoof, when i'm running browser with my Mac.

  2. Cloudflare JS Challenge detects, when userAgent set in browser.newContext, and os is not/is spoofed.

Proof

image

System information:

barjin commented 1 year ago

Thank you for submitting this issue! Fingerprinting services can usually detect the machine's OS by performing font fingerprinting (different OSes provide different fonts), among others. These are usually some of the harder things to spoof.

Until we have that incorporated in the fingerprinting suite, always try matching your fingerprint's OS / browser (version) to the one you are actually using. The ML model generating the fingerprints has a plenty of samples for all the major operating systems - so it shouldn't cause any problems.

petuxodev commented 1 year ago

Thank you for submitting this issue! Fingerprinting services can usually detect the machine's OS by performing font fingerprinting (different OSes provide different fonts), among others. These are usually some of the harder things to spoof.

Until we have that incorporated in the fingerprinting suite, always try matching your fingerprint's OS / browser (version) to the one you are actually using. The ML model generating the fingerprints has a plenty of samples for all the major operating systems - so it shouldn't cause any problems.

Botd does detection with os cpu, and etc others. it does not use font fingerprinting, it is open source, check it yourself.

petuxodev commented 1 year ago

And, cloudflare detects, when you set useragent. lol.

TeitlerS commented 1 year ago

any progress on this?